Matt Johnston
Matt Johnston
Thanks @Jackkal . This looks good, I'll give it a try out and closer review soon.
Could you attach config.log ? The configure script should check whether `basename()` exists. You could see if Dropbear 2022.82 improves things, there were a few minor changes to configure scripts.
Most of the configure tests are failing with `collect2: fatal error: library libssp_nonshared not found` `libssp_nonshared` looks like it's a library that comes from gcc - is there something wrong...
I think the problem is that Dropbear doesn't add the `LDFLAGS` when testing which hardening options should be added. I've changed the test in https://github.com/mkj/dropbear/commit/72d8cae7a4c295cabca2dd0fbe14f134762dc90a , can you see if...
What platform is that compiling on?
Hm, loginrec.c hasn't changed for a long time, and OpenSSH's copy (where it came from) still has the same thing. So I guess that code path doesn't usually get hit....
Forgot to add, which exact toolchain are you using?
Hi, I think it might make more sense to have just -o TCPKeepAlive=yes and -o compression=no? That shouldn't need to change parsing much and is compatible with openssh's client. I...
I'm not sure a config file is really needed. dbclient has -m/-c and a a server config will apply to all old implementations so should just be compiled with allowed...
I'm not too familiar with PAM credentials, but the docs at http://www.linux-pam.org/Linux-PAM-html/adg-interface-by-app-expected.html section 3.1.8.1 suggest it should be called after the setuid()/setgid() in svr-chansession. Does that work for your case?...